Defense Centre Updates

[derekhendridge]

Hi,

I want to make sure that our new Defense Centre & ASAs with FirePOWER are being kept up-to-date. I don't want to do any auto-updates of software (these I would do manually), but I do want to make sure that everything else that can be, is kept up-to-date.

Is this the correct way to do it? What actually gets updated as part of the Rule Updates?

System -> Updates -> Rule Updates -> Enable Rule Update Imports (re-apply intrusion policy option selected <- Is this needed or why would you not select this option?)       
System -> Updates -> Geolocation Updates

and

Tools -> Scheduling -> Add Task
Download -> Vulnerability Database
Install -> Vulnerability Database

Tools -> Scheduling -> Add Task
Update URL Filtering Database (Do I need to install these somehow?)

Thanks - Derek

[Marvin Rhoads]

That will cover it.

Some customers prefer to make an individual decision on the Rules included in a given update before applying them in their environment. That's why the option is there to apply them or not.

I don't believe the URL filtering db needs to be applied out to sensors. Downloading it into FMC suffices.

[derekhendridge]

Thanks Martin - Derek.